Access control flaw in Lenovo XClarity Controller
Priority LOW 23CWE-264Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Security bypass, Privilege escalation
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-264 and CWE-269.
Summary
An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC.
Why it matters now
EPSS 0.00641 50th percentileScored 2026-11-07
Fix Fixed XClarity Controller (XCC) (Lenovo): 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | XClarity Controller (XCC) | before 3.08 CDI340V; before 3.01 TEI392O; before 1.71 PSI328N | 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N | Patch available | CNA |
- XClarity Controller (XCC) VendorLenovo Affected before 3.08 CDI340V; before 3.01 TEI392O; before 1.71 PSI328N Fixed in 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N Patch available CNA
CPE configurations NVD · 35
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* | before 3.01_tei392o | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_hx_7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_vx_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* Versions before 3.01_tei392o Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_hx_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_vx_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 25 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:lenovo:thinkagile_vx_7000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sd650_dwc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* | before 3.08_cdi340v | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkagile_mx_sr650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* | before 1.71_psi328n | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinksystem_sr950_server:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:h:lenovo:thinkagile_vx_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sd650_dwc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* Versions before 3.08_cdi340v Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkagile_mx_sr650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:* Versions before 1.71_psi328n Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinksystem_sr950_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
- Fix · CNA XClarity Controller (XCC) (Lenovo) Fixed in 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6195
- 2026-10-03 Alias added: GHSA-xhgx-q9xg-fg3q
- 2026-10-23 EPSS moved to the 50th–90th percentile
References
More Lenovo Xclarity Controller vulnerabilities
- TI-2019-04386 CSV injection in Lenovo XClarity Controller CVSS 3.1MEDIUM 6.5
- TI-2021-02853 Incorrect authorization in Lenovo XClarity Controller CVSS 3.1MEDIUM 5.3
- TI-2021-02435 Cleartext transmission of sensitive information in Lenovo XClarity Controller CVSS 3.1MEDIUM 4.9
Sources
- CVE-2019-6195 · CVE Program
- CVE-2019-6195 · NVD
- FIRST EPSS
- GHSA-xhgx-q9xg-fg3q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences